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AN INTEGRATED CI RCUIT CHIP MADE SECURE AGAINST THE ACTION 
OF ELECTROMAGNETIC RADIATION 

The present invention relates to integrated circuit 
(IC) chips for incorporating in portable articles, in 
particular of card format. 

IC cards are generally used in applications in which 
it is essential for confidential information to be stored 
and processed securely. By way of example, such 
applications lie in the fields of health, telephony, pay 
TV, or banking such as electronic 'purse applications. 

Such cards comprise a plastics card body having an' 
IC or chip device incorporated therein. 

In the chip, the integrated circuit forms a complex 
assembly of logic cells over which a central processor 
unit (CPU) dispenses and controls information stored in 
RAM, ROM, or EEPROM type memories by means of a data bus 
and an address bus. 

C9nventionally, the logic cells are of the CMOS 
type. They are constituted by a P-type first MOS 
transistor and by an N-type second MOS transistor 
connected in series and controlled by a common logic 
control signal resulting from the concomitant action of 
electrical signals present at the inputs of the circuit 
and of electrical signals generated by programs contained 
in the ROM or EEPROM memories or by associated electronic 
circuits. As a function of the logic control signal, 
charge distribution between valance and conduction bands 
is altered, thereby giving rise to controlled switching 
of said transistors. 

Nevertheless, some energy sources can also modify 
this distribution. This applies in particular to 
electromagnetic radiation, in particular in ranges going 
from ultraviolet to infrared. As a result, using such 
radiation to illuminate a zone of the chip, e.g. a set of 
logic cells, can cause the transistors in said set of 
cells to switch independently of any electrical control 
ordered by the logic circuits. 
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That is why attackers, by taking a chip connected 
via its Vdd, Vss, Clock, I/O, and Reset pads, and by 
illuminating an appropriate zone of its circuits with 
focused electromagnetic radiation in the ultraviolet, 
5 visible, or infrared range at a time t chosen by them, 
have been able to cause the transistors in said zone to 
switch, thereby altering the normal sequencing of 
operations programmed in the memories of the chip, and 
have in particular been able to cause the chip to perform 
10 operations that are normally not authorized, thus giving 
access to secrets without destroying the circuits. 

Known means for protecting integrated circuits 
against the action of electromagnetic radiation have 
nevertheless been developed. These comprise software 
15 means characterized by the fact that the programs in the 
ROM and EEPROM memories of the chip are numerous and 
associated with verification means. Nevertheless, those 
known means do not provide effective protection against 
"light" attack and they suffer from the drawbacks of 
20 requiring a large amount of memory space in the chip and 
of significantly slowing down the execution of the 
operations it is required to perform. 

"From t'rTe~a~]3ove-7 ^a~re'cJ:fTtf"cr ^l problem which the 

invents^^n seeks to solve is that of providing a chip for 
25 a chip-cb^taining portable article, in particular an 
article of cHrd format, the chip comprising firstly a 
silicon substrat>e layer whose active face has circuits 
integrated therein^^d^f ining a central processor unit and 
memories, and secondlyNan additional layer of silicon 
30 covering at least part ofN^id active face, which chip is 
not sensitive to the action b^^electromagnetic radiation 
in the ultraviolet, visible, andX^frared ranges. 

According to the invention, a s^ution to this 
technical problem consists in that the ctjJ^p further 
35 comprises physical means for providing phyaiscal 
protection against the action of electromagnet: 
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radiation 
than 1 lam 



rajred range at a wavelength longer 



Specifically, these physical means for providing 
protection against the action of electromagnetic 
radiation are dopants for silicon, 'or they are formed by 
surface irregularities or by at least one metal layer. 

The invention will be better understood on reading 
the following non-limiting description given with 
reference to the accompanying drawings, in which: 

• Figure 1 is a perspective view of a card having a 
chip of the invention; 

• Figure 2 is a perspective view of a module 
including a chip of the invention; 

• Figure 3A and SB are perspective views showing two 
types of chip of the invention; 



' Figm?^^4A, 4B, and 4C are cross-sections through 
three variants o^"^^ar^^..ii^rst. embodiment of a chip of the 
invention; ..^^ 

• Figures 5A and 53 are graphs showing the extent to 
20 which the means of the invention provide the chip with 

protection against the action of light; 

' Fi-gures 6A, 6B, 6C, and 6D are cross-sections 
showing f our^T^a^ants of a second embodiment of a chip of 
the invention; an^'"^,.^^^^^ 

• Figures 7A, 7B, /C>...^aTid 7D are cross-sections 
showing four variants of a thiTi^d-^.^CTribodiment of a chip of 
the invention. ^ ~ — 



- The present invent io^fT'^deals by way of example with 
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smart cards, nevertheless, the invention naturally 
applies in general to any integrated circuit device for 
incorporation in a portable article, such as a subscriber 
identity module (SIM) of mini-card format, or an 
electronic label. 

A smart card is a standard portable article 
operating with and/or without contact and it is defined 
in particular in ISO standards 7810 and 7816, the content 
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of which is incorporated in the present description by 
reference . 

As shown in Figure 1, a smart card comprises firstly 
a plastics card body 2 and secondly an electronic module 
5 3 having contact areas 4 lying flush with the surface of 
the card body 2 . 

The card body 2 is made of a plastics material which 
can be thermoplastic or thermosetting. It is in the form 
of a flat rectangular parallelepiped having dimensions 

10 which are about 85 millimeters (mm) long, 54 mm wide, and 
0.76 mm thick. 

The electronic module 3 shown in Figure 2 comprises 
an integrated circuit or chip device 5 fixed via its rear 
surface 6 to a thickness 7 of epoxy that carries the 

15 contact areas 4. Contact pads 8 on the chip 5 are 

electrically connected to said areas 4 by means of metal 
wires passing through holes 10 opening out through the 
thickness 7 of epoxy. The assembly comprising the chip 5 
and the wires 9 is embedded in a protective resin 11. 

20 Chips 5 of the invention are in the form of small 

rectangular parallelepipeds, in practice having a side of 
about 2 mm and a thickness of a few hundreds of microns 
(pm) , e.g. 200 pm. There are two main types. 

In a first type as shown in Figure 3A, the chip 5 

25 has a silicon substrate layer 12. This layer 12 has an 

active face 13 in which the circuits are integrated and a 
face opposite from said active face 13, i.e. the rear 
face 6. The contact pads 8 are generally five in number 
and they are integrated in the active face 13. 

31) Nin a second type shown in Figure 3B, the chip 5 has 

in simi1>a^ manner a silicon substrate layer 12 whose rear 
face 8 has b^r-e^i thinned. This silicon substrate layer 12 
likewise has an ab*fe4^e face 13 which includes the 
integrated circuits an^^^-a^ace opposite said active face, 

35 i.e. the rear face 6. Howev^^^v. the active face 13 is 
covered in an additional layer 1 4>>-^.^ilicon which is 
sealed to said face 13 via a sealing lay^^:^5. The 
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a^^itional layer 14 has a top face 18 and a bottom face 
19 incT^^i^tact with the sealing layer. The sealing layer 
15 and the aSdj^ional layer 14 advantageously cover all 
or at least a ma jo^^^ortion of the active face 13 of the 
5 chip 5 with the excepti&n>^^ the contact pads 8 which 
remain accessible through opertijq^s 16 or "vias" formed 
through said layers 14 and 15. In^>^;^tice, the 
thicknesses of the various layers are as^^^Qllows. 
Thinned substrate layer: about 15 ym; addition^:^^ layer : 
10 about 150 pm; and sealing layer: about 10 ym. 



Whatever its type, the chip 3 of the invention has 
physical means providing physical protection against the 
action of light, i.e. against the action of 
electromagnetic radiation in the ultraviolet, visible, 
15 and infrared ranges, said ranges being defined as follows 
by wavelength: 

• ultraviolet: 10 nanometers (nm) < X < 400 nm; 

• visible: 400 nm < < 700 nm; and 

• infrared: 0.7 pm < ^ < 0.1 mm. 

20 In a first embodiment of the invention as shown in 

Figures 4A, 4B, and 4C, these means are silicon dopants 
17 . 

In an intrinsic silicon crystal, all or nearly all 
of the atoms are silicon atoms. As shown in Figure 5A, 

25 an intrinsic silicon crystal at 300 Kelvins (K) is opaque 
to electromagnetic radiation in most of the visible and 
ultraviolet spectrum at a wavelength longer than 0.7 ]jm, 
having an absorption coefficient greater than 100 cm'i . 
However, this absorption coefficient falls off very 

30 considerably at wavelengths greater than 1 \im, i.e. for 
the portion of the electromagnetic spectrum that 
corresponds substantially to the infrared range. 
Infrared radiation therefore penetrates intrinsic 
silicon . 

35 As shown in Figure 5B, in the presence of dopants 17 

at a concentration of = lO^^ atoms per cm^, the light 
absorption coefficient remains greater than 100 cm"^, not 
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only at wavelengths shorter than 1 pm, but also at longer 
wavelengths. It can even be seen that the absorption 
coefficient increases at wavelengths rising from 1 jam to 
10 pm. 

Thus, the dopants conventionally used for changing 
the seiuiconductive properties of silicon are capable of 
changing the absorption properties of an intrinsic 
crystal of silicon so that its absorption coefficient 
increases significantly at wavelengths longer than 1 
i.e. in particular, at wavelengths in the infrared range. 

In the invention, the dopants 17 are atoms whose 
chemical nature is different from that of silicon such 
that the presence thereof gives rise to defects in its 
crystal lattice. They can be atoms of phosphorus or of 
boron, for example. The number of dopant atoms present 
in the silicon lies in the range 10^'^ to lO^o atoms per 
cm^, and is preferably about 10^^ atoms per cm^ . Light 
absorption at given wavelength and thickness increases 
with increasing concentration of dopant. 

The dopants 17 can be incorporated in the crystal 
lattice while the silicon crystal is being grown, or else 
they can be the subject of high temperature diffusion 
under an inert atmosphere, or they can be the subject of 
ion implantation. 



dopants 17 can be present in the silicon 
substrateN^yer 12 of a chip 5 of the first type or of a 
chip 5 of th^^econd type. They can also be incorporated 
in the additiona^JLayer 14 of a chip 5 of the second 
type. 

In the variant of F>g:ure 4A which shows a chip 5 of 
the second type, the dopants'S^ are present in the 
additional layer 14 of the chip 5>^They are uniformly 
distributed throughout this layer 14 /^Nevertheless , they 
could be concentrated solely in a fractiohs^f the 
thickness of said layer 14, in particular iri^fe^e portion 
of said layer that is close to its top face 18 
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In the variant of Figure 4B which shows a chip 5 of 
the first type, the dopants 17 are present in the 
substrate layer 12 of the chip 5. These dopants are 
concentrated in the rear portion of said layer 12. Thus, 
5 the effects of the dopants on electrical conduction do 
not interfere with proper operation of the integrated 
circuits on the active face 13 of the chip 5. 

-In the variant of Figure 4C which shows a chip 5 of 
the secbs^id type, the dopants 17 are present both in the 

10 substrate >^er 12 of the chip and in its additional 
layer 14. \v 

In a seconcT^^^iubodiiuent of the invention as shown in 
Figures 6A, 6B, ancT^^^^ the means providing physical 
protection against the a<;tion of light are formed by 

15 surface irregularities 20 v5>^ble on a face of a layer of 
silicon. These surface irregul^i^ties can be visible on 
the rear face of the silicon substrate or on one or two 
of the top and bottom faces of the add^><ional layer 14 

for chips 5 of the second type. ■ 

20 By way of example, these surface irregularities 20 

are constituted by recesses and projections formed over 
the entire surface in question of the substrate or 
additional layer. The height of these recesses and 
projections is of the order of a few microns. 

25 In practice, the irregularities 20 are formed by 

etching the silicon, e.g. by means of a dry technique 
such as mechanical abrasion, or a wet technique such as 
potassium hydroxide (KOH) machining. 

Focused incident electromagnetic radiation, and in 

30 particular such electromagnetic radiation having a 
wavelength longer than 1 pm, in particular infrared 
radiation, is reflected in part by the irregular walls cjf 
the silicon and is subject in part to refraction. By 
being reflected, attenuated, and diffused in this way, 

35 the radiation no longer reaches the intended targets of 

the attacker and the attacker can no longer predict which 
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targets will finally be reached. This makes attack 

impo s sible . ^ 

In the variant of Figure 6A which shows a chip 5 of 
the second type, the irregularities 20 are formed on the 
5 face of the additional layer 14 which comes into contact 
with the sealing layer 15. 

In the variant of Figure 6B which shows a chip 5 of 
the first type, the irregularities 20 are formed in the 
rear face of the silicon substrate layer, 
10 In the variant of Figure 6C which shows a chip 5 of 

the second type, the irregularities 20 are formed in the 
face 18 of the additional layer. 

In the variant of Figure 6D which shows a chip 5 of 
the second type, the irregularities 20 are formed in the 
15 top face 18 of the additional layer 14, in its bottom 
face 19, and in the rear face 6 of the chip 3. 

In a third embodiment of the invention shown in 
Figures 7A, 7B, and 7C, the physical protection means are 
formed by a metal layer 21 assembled on at least one of 
20 the faces of the substrate or additional layers 12 or 14 
of silicon and having a thickness of more than 

50 An gstroms (A), e.g. about 100 'A. 

By way of example, this can be a layer of aluminum, 
of palladium, or a layer made up of a superposition of 
25 metal sub-layers, e.g. of nickel, of chromium, and of 
gold . 

A face can be metallized by vacuum deposition. 
The layer of metal reflects or absorbs all of the 
incident light that is intended to illuminate the 
30 circuits. It is no longer possible to use an optical 
microscope to inspect the active surface of the 
integrated circuit nor is it possible to observe it using 
infrared techniques . 

In the variant of Figure 7A which shows a chip of 
35 the second type, the metal layer 21 is placed between the 
additional layer 14 and the sealing layer 15. 
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In the variant of Figure 7B which shows a chip of 
the fi^t type, the metal layer 21 is placed on the rear 
face of tlife^substrate layer 12. 

In the va^^N^nt of Figure 7C which shows a chip 3 of 
the second type, thfe-vtnetal layer 21 is placed on the top 
face 18 of the addi t iona^vv^ayer 14. 

In the variant of Figurfev^D which shows a chip 3 of 
the second type, a first metal l^^^r is placed between 
the additional layer 14 and the seall^^ layer 15, and a 
second metal layer is placed on the rear^^e of the 
substrate layer 12. 



Naturally, the invention is not limited to the 
above-described variants. In addition, it is possible to 
use different protection means in the same chip 5. 

15 It will be observed that installing an additional 

layer on the active face of a chip of the first type 
and/or installing the above-mentioned means for 
protecting the circuits against the action of light can 
take place in steps that are subsequent to the 

20 conventional steps for producing integrated circuits. As 
a result, conventional chip manufacturing lines can be 
conserved. Furthermore, a chip of the invention, whether 
of the first type or of the second type, has 
substantially the same dimensions as conventional chips 

25 in the state of the art. As a result lines for 

manufacturing modules can be conserved to operate with 
chips of the invention. 

It will also be observed that the means providing 
physical protection against the action of light can cover 

30 all of the integrated circuits or only some of them. 

When only certain portions of said integrated circuits 
are covered, those portions are advantageously key 
portions, i.e. portions which are sensitive to attack by 
light and in which a disturbance produced by such light 

35 could be harmful to the integrity of the chip and the 
secrets it contains. In particular, such key portions 
can be constituted by the voltage multiplier used for 
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programming the EEPROM memory cells, the amplifiers for 
reading the content of the memories, and some of the 
registers of the volatile memory (RAM) or of the central 
processor unit (CPU) . 



